Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/08/2023, 11:06

General

  • Target

    52f24a831fb38583dc14c6cd67d1a701_mafia_JC.exe

  • Size

    839KB

  • MD5

    52f24a831fb38583dc14c6cd67d1a701

  • SHA1

    b6010c2b29399ad759d2f6ccd5f8e08bd0782371

  • SHA256

    9ec4b336ac9f20b30da1d3b8b769566b2836fc528bd62b407b56f074037a007f

  • SHA512

    a67f477c192dc778c8d2aa1a7b1823ade976e788dc24368263d7be8219207cc97d3eda3f926a4a9bc1232f7cc99fda3ba935707d0c050d9fcb66a9771f4a81fe

  • SSDEEP

    24576:0DDWfqlWNxed2eZLmIzDjLEIMkaBdJ4FW48lWLggE9rEesA:AWfqkaDjAIBavJ4FHknErA

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\52f24a831fb38583dc14c6cd67d1a701_mafia_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\52f24a831fb38583dc14c6cd67d1a701_mafia_JC.exe"
    1⤵
      PID:4316
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4316 -s 220
        2⤵
        • Program crash
        PID:4320
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4316 -ip 4316
      1⤵
        PID:4848

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4316-134-0x0000000000570000-0x0000000000650060-memory.dmp

              Filesize

              896KB

            • memory/4316-135-0x0000000000570000-0x0000000000650060-memory.dmp

              Filesize

              896KB

            • memory/4316-136-0x0000000000570000-0x0000000000650060-memory.dmp

              Filesize

              896KB

            • memory/4316-137-0x0000000000570000-0x0000000000650060-memory.dmp

              Filesize

              896KB